KVM: SVM: Prevent debugging under SEV-ES

Browse source

Since the guest register state of an SEV-ES guest is encrypted, debugging
is not supported. Update the code to prevent guest debugging when the
guest has protected state.

Additionally, an SEV-ES guest must only and always intercept DR7 reads and
writes. Update set_dr_intercepts() and clr_dr_intercepts() to account for
this.

Signed-off-by: Tom Lendacky <thomas.lendacky@amd.com>
Message-Id: <8db966fa2f9803d6454ce773863025d0e2e7f3cc.1607620209.git.thomas.lendacky@amd.com>
Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>

...

This commit is contained in:

Tom Lendacky 2020-12-10 11:09:43 -06:00 • committed by Paolo Bonzini

parent f1c6366e30

commit 8d4846b9b1

3 changed files with 35 additions and 14 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

9

arch/x86/kvm/svm/svm.c

View file

37

arch/x86/kvm/svm/svm.h

View file

3

arch/x86/kvm/x86.c

View file